SanStone

Privacy Policy

Last updated: October 13, 2026

SanStone (“we,” “us”) provides Gen L, a lead optimizer for missed-call recovery, intake forms, and appointment messaging for businesses and organizations (“accounts”). This policy describes how we collect and use information when someone interacts with Gen L on behalf of a participating business.

Information we collect

  • Phone numbers of callers who reach missed-call recovery
  • Intake form answers submitted through an account’s intake link
  • SMS consent records (IVR keypad press 1, website checkbox, and verbal-consent confirmation by staff)
  • Appointment details if a qualified lead books a consultation
  • Message delivery status for SMS we send on behalf of an account
  • Account and settings information provided by the business
  • Business messaging-registration information submitted in Gen L (legal business name, entity type, address, website, authorized contact details, campaign/consent descriptions, sample messages, and policy URLs). Tax identifiers such as EIN may be collected solely to complete carrier messaging registration and are minimized after submission when possible

How we use information

  • To send transactional / service-related SMS (for example missed-call follow-up, intake link after consent, appointment confirmation and reminders)
  • To register each participating business’s brand and messaging campaign with the applicable messaging registration authorities through Gen L’s messaging providers, using that business’s own identity (not SanStone’s)
  • To operate the account dashboard (leads, qualifications, scheduling)
  • To provide support and improve reliability and security of the service

We do not use mobile numbers or SMS consent for marketing or promotional text messages.

SMS / mobile information

Mobile phone numbers and SMS consent information will not be sold or shared with third parties or affiliates for their own marketing or promotional purposes. Carrier data and messaging content are used only to deliver the transactional service messages described in this policy and to operate the service for the account the person contacted.

SMS message frequency varies. Message and data rates may apply. Recipients may opt out of SMS by replying STOP. Recipients may request help by replying HELP. Consent to receive SMS is optional and is not a condition of purchase. After opting out, the person may still contact the business by phone or other published methods.

How people consent (missed-call IVR press 1, verbal consent recorded in New Intake, or the website/intake form checkbox) is described on our SMS Consent page.

Sharing

We may process information with service providers necessary to operate the platform and deliver requested communications (for example messaging, voice, hosting, and database providers), only as needed to provide the service. We do not sell personal information.

When a business submits messaging registration in Gen L, SanStone securely transmits the required registration fields to its messaging registration partners and applicable registries over encrypted server-to-server connections so the business can be verified for transactional SMS. Those partners and authorities may process or retain submitted information according to their requirements and policies. Business-registration data is separate from SMS recipients’ mobile numbers and consent records; both receive appropriate protections, and SMS opt-in data is not shared for unrelated third-party marketing.

Retention & security

We retain information as needed to provide the service to accounts and as required by law. We use reasonable administrative and technical safeguards to protect information, including HTTPS/TLS in transit. Gen L aims to minimize retention of sensitive registration identifiers (for example wiping full EIN values after successful provider submission while keeping registration IDs, statuses, timestamps, and reviewer feedback needed for corrections and audits). Sensitive registration values are not intended for application logs, analytics, or ordinary support views. Access is restricted by account (tenant) authorization.

This policy does not claim that registration data never passes through Gen L’s systems: Gen L receives registration information from the business dashboard and forwards what is required to messaging registration partners. We do not claim that data is never stored, never accessed, or immediately deleted unless that behavior is verified for a specific field.

Contact

For privacy questions, contact the business you reached or email the SanStone operator supporting that account’s Gen L subscription.